Review by counsel pending. This document is placeholder legal copy only and has not been reviewed by legal counsel. Do not rely on it as legal advice. Replace before public launch.

Data Processing Agreement

Last updated: June 2026 (placeholder — review by counsel pending)

1. Subject matter

This Data Processing Agreement ("DPA") forms part of the Gathmo Terms of Service and governs the processing of personal data by Gathmo GmbH ("Processor") on behalf of the Customer ("Controller") in connection with the Gathmo platform.

2. Nature and purpose of processing

Gathmo processes personal data (event guest uploads including photos, videos, voice messages, and associated metadata) to provide the event-media platform services described in the Terms of Service.

3. Processor obligations

Gathmo will: process personal data only on documented instructions from the Controller; ensure that authorised personnel are bound by confidentiality; implement appropriate technical and organisational measures under GDPR Art. 32; and assist the Controller with data subject rights requests.

4. Sub-processors

Gathmo uses sub-processors to provide certain services (including AWS for infrastructure). A current list of sub-processors is available on request. Gathmo will notify the Controller of any intended changes to sub-processors.

5. Data transfers

All personal data is stored and processed within the European Economic Area. Gathmo does not transfer personal data to third countries without adequate safeguards as required by GDPR Chapter V.

6. Return and deletion

Upon termination of the services, Gathmo will, at the Controller's choice, delete or return all personal data and delete existing copies unless EU or member-state law requires storage of the personal data.

Questions about this DPA? Email privacy@gathmo.com